Java SecurityUtils类代码示例

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
/**
 * POST  /account : update the current user information.
 *
 * @param userDTO the current user information
 * @return the ResponseEntity with status 200 (OK), or status 400 (Bad Request) or 500 (Internal Server Error) if the user couldn't be updated
 */
@RequestMapping(value = "/account",
    method = RequestMethod.POST,
    produces = MediaType.APPLICATION_JSON_VALUE)
@Timed
public ResponseEntity<String> saveAccount(@Valid @RequestBody UserDTO userDTO) {
    Optional<User> existingUser = userRepository.findOneByEmail(userDTO.getEmail());
    if (existingUser.isPresent() && (!existingUser.get().getLogin().equalsIgnoreCase(userDTO.getLogin()))) {
        return ResponseEntity.badRequest().headers(HeaderUtil.createFailureAlert("user-management", "emailexists", "Email already in use")).body(null);
    }
    return userRepository
        .findOneByLogin(SecurityUtils.getCurrentUserLogin())
        .map(u -> {
            userService.updateUser(userDTO.getFirstName(), userDTO.getLastName(), userDTO.getEmail(),
                userDTO.getLangKey());
            return new ResponseEntity<String>(HttpStatus.OK);
        })
        .orElseGet(() -> new ResponseEntity<>(HttpStatus.INTERNAL_SERVER_ERROR));
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
/**
 * POST  /account -> update the current user information.
 */
@RequestMapping(value = "/account",
        method = RequestMethod.POST,
        produces = MediaType.APPLICATION_JSON_VALUE)
@Timed
public ResponseEntity<String> saveAccount(@RequestBody UserDTO userDTO) {
    return userRepository
        .findOneByLogin(userDTO.getLogin())
        .filter(u -> u.getLogin().equals(SecurityUtils.getCurrentLogin()))
        .map(u -> {
            userService.updateUserInformation(userDTO.getFirstName(), userDTO.getLastName(), userDTO.getEmail(),
                userDTO.getLangKey());
            return new ResponseEntity<String>(HttpStatus.OK);
        })
        .orElseGet(() -> new ResponseEntity<>(HttpStatus.INTERNAL_SERVER_ERROR));
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
/**
 * GET  /account/sessions : get the current open sessions.
 *
 * @return the ResponseEntity with status 200 (OK) and the current open sessions in body,
 *  or status 500 (Internal Server Error) if the current open sessions couldn't be retrieved
 */
@RequestMapping(value = "/account/sessions",
    method = RequestMethod.GET,
    produces = MediaType.APPLICATION_JSON_VALUE)
@Timed
public ResponseEntity<List<PersistentToken>> getCurrentSessions() {
    return userRepository.findOneByLogin(SecurityUtils.getCurrentUserLogin())
        .map(user -> new ResponseEntity<>(
            persistentTokenRepository.findByUser(user),
            HttpStatus.OK))
        .orElse(new ResponseEntity<>(HttpStatus.INTERNAL_SERVER_ERROR));
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
public void updateUser(String firstName, String lastName, String email, String langKey) {
    userRepository.findOneByLogin(SecurityUtils.getCurrentUserLogin()).ifPresent(u -> {
        u.setFirstName(firstName);
        u.setLastName(lastName);
        u.setEmail(email);
        u.setLangKey(langKey);
        userRepository.save(u);
        log.debug("Changed Information for User: {}", u);
    });
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
public void changePassword(String password) {
    userRepository.findOneByLogin(SecurityUtils.getCurrentUserLogin()).ifPresent(u -> {
        String encryptedPassword = passwordEncoder.encode(password);
        u.setPassword(encryptedPassword);
        userRepository.save(u);
        log.debug("Changed password for User: {}", u);
    });
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
/**
 * GET  /account/sessions -> get the current open sessions.
 */
@RequestMapping(value = "/account/sessions",
        method = RequestMethod.GET,
        produces = MediaType.APPLICATION_JSON_VALUE)
@Timed
public ResponseEntity<List<PersistentToken>> getCurrentSessions() {
    return userRepository.findOneByLogin(SecurityUtils.getCurrentLogin())
        .map(user -> new ResponseEntity<>(
            persistentTokenRepository.findByUser(user),
            HttpStatus.OK))
        .orElse(new ResponseEntity<>(HttpStatus.INTERNAL_SERVER_ERROR));
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
public void updateUserInformation(String firstName, String lastName, String email, String langKey) {
    userRepository.findOneByLogin(SecurityUtils.getCurrentLogin()).ifPresent(u -> {
        u.setFirstName(firstName);
        u.setLastName(lastName);
        u.setEmail(email);
        u.setLangKey(langKey);
        userRepository.save(u);
        log.debug("Changed Information for User: {}", u);
    });
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
public void changePassword(String password) {
    userRepository.findOneByLogin(SecurityUtils.getCurrentLogin()).ifPresent(u-> {
        String encryptedPassword = passwordEncoder.encode(password);
        u.setPassword(encryptedPassword);
        userRepository.save(u);
        log.debug("Changed password for User: {}", u);
    });
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
public User getUserWithAuthorities() {
    User user = userRepository.findOneByLogin(SecurityUtils.getCurrentUserLogin()).get();
    return user;
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
@Transactional(readOnly = true)
public User getUserWithAuthorities() {
    User currentUser = userRepository.findOneByLogin(SecurityUtils.getCurrentLogin()).get();
    currentUser.getAuthorities().size(); // eagerly load the association
    return currentUser;
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
/**
 * DELETE  /account/sessions?series={series} : invalidate an existing session.
 *
 * - You can only delete your own sessions, not any other user's session
 * - If you delete one of your existing sessions, and that you are currently logged in on that session, you will
 *   still be able to use that session, until you quit your browser: it does not work in real time (there is
 *   no API for that), it only removes the "remember me" cookie
 * - This is also true if you invalidate your current session: you will still be able to use it until you close
 *   your browser or that the session times out. But automatic login (the "remember me" cookie) will not work
 *   anymore.
 *   There is an API to invalidate the current session, but there is no API to check which session uses which
 *   cookie.
 *
 * @param series the series of an existing session
 * @throws UnsupportedEncodingException if the series couldnt be URL decoded
 */
@RequestMapping(value = "/account/sessions/{series}",
    method = RequestMethod.DELETE)
@Timed
public void invalidateSession(@PathVariable String series) throws UnsupportedEncodingException {
    String decodedSeries = URLDecoder.decode(series, "UTF-8");
    userRepository.findOneByLogin(SecurityUtils.getCurrentUserLogin()).ifPresent(u -> {
        persistentTokenRepository.findByUser(u).stream()
            .filter(persistentToken -> StringUtils.equals(persistentToken.getSeries(), decodedSeries))
            .findAny().ifPresent(t -> persistentTokenRepository.delete(decodedSeries));
    });
}
 

import com.mycompany.myapp.security.SecurityUtils; //导入依赖的package包/类
/**
 * DELETE  /account/sessions?series={series} -> invalidate an existing session.
 *
 * - You can only delete your own sessions, not any other user's session
 * - If you delete one of your existing sessions, and that you are currently logged in on that session, you will
 *   still be able to use that session, until you quit your browser: it does not work in real time (there is
 *   no API for that), it only removes the "remember me" cookie
 * - This is also true if you invalidate your current session: you will still be able to use it until you close
 *   your browser or that the session times out. But automatic login (the "remember me" cookie) will not work
 *   anymore.
 *   There is an API to invalidate the current session, but there is no API to check which session uses which
 *   cookie.
 */
@RequestMapping(value = "/account/sessions/{series}",
        method = RequestMethod.DELETE)
@Timed
public void invalidateSession(@PathVariable String series) throws UnsupportedEncodingException {
    String decodedSeries = URLDecoder.decode(series, "UTF-8");
    userRepository.findOneByLogin(SecurityUtils.getCurrentLogin()).ifPresent(u -> {
        persistentTokenRepository.findByUser(u).stream()
            .filter(persistentToken -> StringUtils.equals(persistentToken.getSeries(), decodedSeries))
            .findAny().ifPresent(t -> persistentTokenRepository.delete(decodedSeries));
    });
}